Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
File:                     GRk7bk0L6JA155k5tQAvxcFsm8w.cer (raw, json)
Hash identifier:          tTXqeDhc99bFWnE6PA1iZTQ3mVXJWPXvRYRT42oDrBQ=
Subject key identifier:   19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AAE480BB22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:02:25 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 35042
                          IP: 88.214.24.0/22
                          IP: 91.238.180.0/23
                          IP: 185.55.240.0/22
                          IP: 193.24.208.0/22
                          IP: 2a00:1910::/29
                          IP: 2a09:8700::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733978082082 (0xaae480bb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:02:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:e6:56:11:20:d8:3f:dc:5c:e6:23:ca:f0:
                    90:61:36:81:f8:9c:4d:5d:db:e4:52:5a:01:79:07:
                    46:d5:4a:20:03:82:7f:5f:2f:4d:39:c8:b3:c2:9a:
                    4f:39:ff:0d:07:12:63:52:a5:4a:8d:9c:06:29:f1:
                    9f:d8:72:e7:ba:30:88:33:d2:7e:fc:09:92:30:02:
                    ad:21:c4:eb:63:9f:da:2f:4e:22:a9:7c:27:d3:44:
                    51:93:5f:ae:cb:cf:4a:e9:83:28:1e:e0:c2:c7:3b:
                    36:30:5d:13:8d:85:0f:e2:e8:93:52:be:02:ad:5c:
                    5f:d9:b5:75:cc:03:87:20:d6:a1:4b:73:1f:69:d2:
                    bf:c9:a4:df:bd:8b:7d:ba:97:fa:32:8b:82:ab:4f:
                    96:4b:76:6a:23:6a:da:58:91:9a:ba:9c:f6:3d:5b:
                    89:ab:f4:1b:39:99:16:00:e4:3b:c8:a8:3f:8f:21:
                    bd:ce:db:27:40:25:08:94:a0:26:38:87:b1:36:71:
                    10:5c:3c:46:91:d1:40:e5:56:71:f0:87:08:ed:23:
                    01:ee:a1:3e:17:18:87:e2:b9:0c:68:60:07:d9:50:
                    39:8d:88:21:c6:32:1f:2e:8c:b0:cb:55:61:9b:64:
                    e1:b5:f5:02:a8:72:4b:8c:71:07:b3:92:ce:9e:93:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.24.0/22
                  91.238.180.0/23
                  185.55.240.0/22
                  193.24.208.0/22
                IPv6:
                  2a00:1910::/29
                  2a09:8700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35042

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:5f:a8:e3:86:c0:7a:58:f9:43:1f:bc:73:53:d9:07:a3:
         c9:55:f4:c0:ad:d0:e2:b5:fb:80:fe:f9:a5:1d:51:4c:fd:7f:
         ea:9b:ab:ab:8f:3d:72:d1:81:64:00:a5:a7:ef:f1:92:bf:1c:
         18:2c:cd:c7:e7:be:09:5b:fd:40:36:c7:60:f0:68:88:a1:00:
         81:d1:e8:3c:66:40:6b:8d:83:f2:67:25:e7:03:d3:e2:4e:b1:
         04:7e:f3:9d:80:6c:d3:1d:b0:d8:aa:4f:ef:49:46:56:5f:ca:
         7b:25:2d:df:56:7b:e0:21:af:af:43:95:f6:32:07:37:0c:65:
         8c:a9:dc:f8:88:b0:d9:65:24:68:41:99:89:8c:81:23:77:0a:
         8f:9b:ef:b3:6b:4c:a9:a4:93:13:bf:45:52:c4:68:2d:e0:64:
         00:75:44:f1:8d:d0:5f:20:36:2f:4d:64:53:d0:ce:86:6d:27:
         2b:2f:33:f5:d4:ec:e2:ab:2f:ae:37:7a:6d:78:29:f2:21:d3:
         50:83:ce:81:1f:25:a1:70:b9:ef:d3:06:5e:4b:7f:ba:1b:2f:
         f5:81:4f:67:18:db:6f:a0:7d:c6:bb:5d:2a:5a:91:ba:c5:d8:
         70:dc:5f:e7:e4:db:7f:5f:f4:11:3d:e5:3d:27:86:87:c4:20:
         5e:94:96:db
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIGAKrkgLsiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTYwMjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxOTE5M2I2ZTRk
MGJlODkwMzVlNzk5MzliNTAwMmZjNWMxNmM5YmNjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA2AvmVhEg2D/cXOYjyvCQYTaB+JxNXdvkUloBeQdG1Uog
A4J/Xy9NOcizwppPOf8NBxJjUqVKjZwGKfGf2HLnujCIM9J+/AmSMAKtIcTrY5/a
L04iqXwn00RRk1+uy89K6YMoHuDCxzs2MF0TjYUP4uiTUr4CrVxf2bV1zAOHINah
S3MfadK/yaTfvYt9upf6MouCq0+WS3ZqI2raWJGaupz2PVuJq/QbOZkWAOQ7yKg/
jyG9ztsnQCUIlKAmOIexNnEQXDxGkdFA5VZx8IcI7SMB7qE+FxiH4rkMaGAH2VA5
jYghxjIfLoywy1Vhm2ThtfUCqHJLjHEHs5LOnpP4PQIDAQABo4ICyDCCAsQwHQYD
VR0OBBYEFBkZO25NC+iQNeeZObUAL8XBbJvMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2U5Mzg0OC0zNTI1LTRiY2Mt
YjIyZC04OTM5ODlhZWYwMGUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZTkzODQ4LTM1MjUtNGJjYy1i
MjJkLTg5Mzk4OWFlZjAwZS8xL0dSazdiazBMNkpBMTU1azV0UUF2eGNGc204dy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAe
BAIAATAYAwQCWNYYAwQBW+60AwQCuTfwAwQCwRjQMBQEAgACMA4DBQMqABkQAwUD
KgmHADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAiOIwDQYJKoZIhvcNAQELBQAD
ggEBAGkOX6jjhsB6WPlDH7xzU9kHo8lV9MCt0OK1+4D++aUdUUz9f+qbq6uPPXLR
gWQApafv8ZK/HBgszcfnvglb/UA2x2DwaIihAIHR6DxmQGuNg/JnJecD0+JOsQR+
852AbNMdsNiqT+9JRlZfynslLd9We+Ahr69DlfYyBzcMZYyp3PiIsNllJGhBmYmM
gSN3Co+b77NrTKmkkxO/RVLEaC3gZAB1RPGN0F8gNi9NZFPQzoZtJysvM/XU7OKr
L643em14KfIh01CDzoEfJaFwue/TBl5Lf7obL/WBT2cY22+gfca7XSpakbrF2HDc
X+fk239f9BE95T0nhofEIF6Ults=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:55 2024 by rpki-client on console-ams.rpki-client.org